Local fix

Have changed back to old password temporarily

Problem summary

Password in KeyGroups.xml file needs to be changed

Problem conclusion

The EKM IPUG also needs modification. In Chapter 3: "Installing
the Encryption Key Manager and Keystores", under Main heading:
"Generating Keys and Aliases for Encryption on LTO 4", under
Sub Heading: "Changing Keystore Passwords", information in
green as shown below needs to be added (information in blue
below is already present in the EKM IPUG).
Changing Keystore Passwords
Note: Once you have set the keystore password, do not change it
unless it?s security has been breached. The passwords are
obfuscated to eliminate any security exposure. Changing the
keystore password requires that the password on every key in
that keystore be changed individually using the following
keytool command.
To change the keystore password enter:
keytool -keypasswd -keypass old_passwd -new new_passwd -alias
alias -keystore keystorename -storetype keystoretype
You must also edit KeyManagerConfig.properties to change the
keystore password in every server configuration file property
where it is specified using one of these methods:
Delete the entire obfuscated password and allow the Encryption
Key Manager to prompt on the next startup.
Delete the entire obfuscated password and type the new password
in the clear. It will be obfuscated on the next startup.
If createkeygroup command had been run earlier to add keygroup
entries in KeyGroups.xml file, you must also run the following
command to update the EncryptionKey attribute in KeyGroups.xml
file.
java com.ibm.keymanager.tools.EKMKeyGroupKeyModifier <Server
Configuration Properties Filename > <KeyGroup password>
Server Configuration Properties Filename is the Server's
Configuration Properties filename having updated keystore
password.
KeyGroup password is the password that was specified while
running createkeygroup command.
eg: java com.ibm.keymanager.tools.EKMKeyGroupKeyModifier
KeyManagerConfig.properties passphrase
This defect will be fixed in:
5.0.0 SR11 FP2